MAL-2026-16130Critical▾ Abyssal⚠ Exploited in the wildMalicious code in aitextkit-py (PyPI)
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 52.3 · likelihood 0 · exploitation 18
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
-= Per source details. Do not edit below this line.=-
The package presents itself as a small text-cleaning utility library, but both shipped implementation modules (text.py and system.py) consist of a single-line pyobfuscator.com loader of the form _ = lambda __: __import__('zlib').decompress(__import__('base64').b64decode(__[::-1]));exec((_)(b'...')), which reverses, base64-decodes, zlib-decompresses, and exec()s an opaque blob at module import. init.py imports from.text, so import aitextkit runs the decoded bytes on the installer's Python interpreter. init.py also re-exports an undocumented setup symbol whose body lives inside the obfuscated blob and which is not mentioned in the README, tests, or public API documentation - a common stager entry-point shape. system.py, which backs the documented get_os_version() helper, uses the identical loader and its tests reference platform, release, and arch fields, so the decoded code at minimum performs host enumeration inside code that is not inspectable from source. The declared text-utility purpose has no legitimate need to ship its entire implementation as an exec-decoded blob; the loader shape matches that used by PyPI credential-stealer families.
The package hides code downloading script, which then downloads and executes a heavily obfuscated final stage. The remote stages are hosted on a domain presenting a suspicious-looking corporate website. The downloaded code establishes persistence e.g. as "anymeetly-cameradriver" systemd service. The discovered artifacts suggest strongly it acts as an infostealer and RAT.
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-09-aitextkit-py
Reasons (based on the campaign):
obfuscation
Downloads and executes a remote malicious script.
persistence
infostealer
exfiltration-browser-data
rat
The package contains code to execute remote commands (probably limited to a specific set) on the victim's machine.
aitextkit-pyRefer to the advisory for the patched release.